F-secure's Process & Task Manager

boboboi

Hello

 

I am trying F-secure Client Security and found that we can *end task* F-secure's processes that easily, how come that could be happened like that ?

 

Thanks

MJ-perComp

Hi,

1) Who are you (I mean what Windows role do you have)

2) What OS are you using

3) What version of CS?

4) What process did you end?

 

TaskMan is a trusted process so it should be able to do so. But if you use a different program to kill that task it should be blocked. I am not sure if PSKILL could show the effect, because PSKILL is also well known not to be malware.

 

Anyway, I think you get my point!

 

BR

 

boboboi

Windows XP Pro & Windows 7 U

FCS V9.30 b381

 

I tired to end process its all process , am tryin to see what will happen if a user wanted to bypass the antivirus

Well, it is not ok to allow task manager to be able to end f-secure's process becuase i do not trust the end users

MJ-perComp

Then giv this a try:

download EICAR.COM from Eicar.org

kill processes (only as normal user, not Admin)

try to open or execute eicar.com

 

You can stop processes, but you can not stop the drivers.

BTW: some processes will even be restarted automatically

 

Lets wait for a more detailed comment from F-Secure.

best Regards

 

Vad

Hi boboboi,

 

Could you, please, specify, what process(es) are you talking about.

As i understand, normal user can see only FSM32.exe - this is F-Icon process (F-Secure icon on the taskbar), ending it doesn't affect the security.

Important processes are running under System or Network Service accounts.

 

Regards,

Vadim

tidaltides

Task Manager can end every program you have in your system and you just have to deal with it.